Problem Route with LAN?
-
Why don't you NOT double router/firewall your network, and use only 1 of those devices - either pfsense or mikrotik?
Jeff
-
This post is deleted! -
This post is deleted! -
Create a gateway in pfsense pointing to your 20.x.x.x/30 IP of your mik router - btw 20 - is public space.. Don't use that as a transit network.. use 10/30 if yoru using 192.168 and 172 address space.. Also 172.168 as also public.. Are those typo's? Did you pull those out your ____ ?
Once you have the gateway setup to your mik, create a route for the networks downstream of your mik.. Your mik is not natting is it?? If so to allow traffic to network behind mik you would have to create port forwards on your mik.
Then create rules on opt to allow the trafic you want.
Still wondering what is the point of this... Just hang that network behind the mik directly on your opt interface of pfsense.
Use of downstream router is normally not something new user to networking would need or want to do.. If you have graduated to the want/need of a downstream router you should have the understanding of routing to implement it.
-
johnpoz thank for reply.
Now I can ping from LAN(192) from ping to LAN(172)on Mikrotic.
But when I ping from LAN(172)from Mikrotic to LAN(192) cannot reply (destination host unreachable).
How to resolve that problem? Please help.Thank for reply.
-
Well you would have to have routes on your mik, I just assumed its default would be towards pfsense 20.x interface
You have fixed these BAD network IPs, or were they just typos?
-
Yes, IP on LAN (192,172,20) I just assign it for testing . When I success testing i will change those IP to the right standard private network. But I still have that problem. On my Mik router i have static route to (192.168.1.0/24 gateway 20.0.0.0). If you not sure about my problem i will screenshot my route to you.
-
-
Well that looks wrong.. how is 192.168 lan reachable?
-
Dude.. Fix your LAN addresses first!
https://lmgtfy.com/?q=lan+address+ranges
There are reasons..
-
Can you send us a screenshot?
-
This post is deleted! -
After i try to verify one by one. Now i saw a problem and solve it . I assign a wrong get way on router. Really happy and Thank you for all your help.
